Kioptrix Level 1 is a deliberately vulnerable Linux VM for practising security testing in your own lab. Use this page to choose where to begin: get the image, finish setup, save a first scan or open the walkthrough. If your VM is already ready, skip the installation reading.
Where are you starting?
| Your current state | Open this next | What you will have |
|---|---|---|
| I have not downloaded the VM. | Download and compatibility guide | The correct image and a checked import path for your host. |
| I have the files, but setup is uncertain. | Five setup checks | A record of the image, boot, network, target identity and recovery method. |
| Setup and target IP are confirmed; I need a first scan. | Check the route, then save a scan | Original scan files and a first reading of the result. |
| I have a scan and want solution guidance. | Level 1 walkthrough — spoilers | Guided investigation and later solution steps. |
| I want a practice plan without the solution. | Seven-session beginner roadmap | A sequence of goals and notes for independent practice. |
Already have a scan, but want to choose your own next check? Read the result and choose the next tool.
Confirm the image and lab before you begin
Match Kioptrix: Level 1 (#1) and Kioptrix_Level_1.rar with the original VulnHub release listing. Level 1.1 (#2) is another release. The original appliance uses VMware-format files and automatic DHCP addressing; follow the download guide for file checks and host compatibility.
Use an isolated training environment you control and test only the identified VM. Review every enabled adapter and any sharing or forwarding; keep the vulnerable target off your physical LAN and unintended outbound paths. A private address or host-only label alone does not establish the full boundary. The setup guide shows what to inspect.
Ready to scan? You should have a running compatible VM, a reviewed lab network, the target’s current address matched to its VM identity and a recorded recovery method. If any item is unknown, finish that check first. A login prompt alone is not a reason to reset the guest password.
Your first-session finish line
A useful first session ends with a small set of records you can explain. You do not need to solve the whole machine in one sitting.
- A setup note: record the release, host architecture, VM software and lab network. Keep the original files and identify your recovery copy or snapshot; say if restoration is still unchecked.
- A matched target: record the VM identifier, its current IP and where and when you matched them. Use your own address, not one copied from a walkthrough.
- A saved scan: keep the exact command, tool version, target, tested coverage and original output files. Record whether the run finished or failed.
- One plain-language observation: describe what your actual output shows. Keep untested ports and unconfirmed service versions marked as unknown.
- One next question: name the service or setup issue you will check next and what result you expect to learn from.
Start the route check and first saved scan. The linked guide separates the commands from their interpretation. Keep the results with your lab session notes.
Find the first step that is not working
| What you see | Check this first | Next guide |
|---|---|---|
| The VM will not import or boot. | Exact error, supplied file format, host architecture and attached disk. | VM import and boot checks |
| The VM runs, but its IP is unknown. | Boot state, adapter connection, network name and DHCP; match the VM MAC to the address. | Identify the target IP |
| The scan says the host is down. | Current target identity and the selected route. Keep the exact output; do not assume the guest is absent. | Setup troubleshooting |
| The command stops on an invalid option. | The exact flag spelling and installed tool help. The scan may not have started. | Tool and command reference |
| The scan finished, but the next action is unclear. | The observed port states, scan coverage and service details still missing. | Interpret the result |
| I want help with the solution. | Choose a hint or a worked step before opening later solution sections. | Walkthrough — contains spoilers |
When asking for help, include the exact release, a sanitized environment summary, the command, its literal result and what you already checked. Say whether you want a hint or a full worked step. Leave out secrets, personal paths and unrelated network details.
Choose the next task from your result
- Setup still unresolved: return to the five setup checks.
- Setup ready, no scan saved: check the route and run the first scan.
- Scan saved, no solution wanted: choose a service check or use the investigation method to plan it.
- Guided solution wanted: open the Level 1 walkthrough.
- Planning another session: use the beginner roadmap and carry your next question into your notes.
Editorial update: October 26, 2026. Reorganized the starting paths, added a direct route to the first scan and defined session outcomes. This update did not include a new VM boot, scan or restore test.